Ellipsys Middleware
ESS-03 Linux IPsec
Elliptic offers Ellipsys Linux IPsec reference software to
help customers in the creation of a complete
IPsec solution. In order to optimize overall
performance, it is vital that the offload
engine be efficiently coupled to the software
system. Elliptic has built a complete solution around
Linux Fedora Core 6 IPsec (2.6.22 or
higher) for the CLP-25 and CLP-36 ESP/AH IPsec
packet processors.
Linux offers a complete IPsec solution which is tightly integrated into the TCP/IP stack and
offers a complete solution for the data plane packet
manipulation required for IPsec. Ellipsys Linux IPsec offers
a reference design for data plane IPsec and supports fast data path
hardware offload for both IPv4 and IPv6 implementations. IPv4 IPsec offload is
done through the substitution of hardware ESP/AH header processing for the native software functions. IPv6 IPsec
offload is done through crypto offload of the base algorithms such as AES, 3DES and HMAC/SHA-1.
The following features are available in the ESS-03:
- Seamlessly integrates hardware offload into Linux IPsec
- Supports IPv4 IPsec PDU processing hardware offload
- Replacement of fast path ESP/AH function with hardware
- Supports IPv6 IPsec hardware offload
- Replacement of fast path cipher operations with hardware
- Reference code licensed in C Source Code
- Developed for Linux Fedora Core 6 with the 2.6.22 kernel
- FPGA based evaluation platform available with the EVAL-01 Evaluation Card
|
